pk7_mime.c 20.3 KB
Newer Older
1 2
/* pk7_mime.c */
/* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
3
 * project.
4 5
 */
/* ====================================================================
6
 * Copyright (c) 1999-2005 The OpenSSL Project.  All rights reserved.
7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    licensing@OpenSSL.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This product includes cryptographic software written by Eric Young
 * (eay@cryptsoft.com).  This product includes software written by Tim
 * Hudson (tjh@cryptsoft.com).
 *
 */

#include <stdio.h>
#include <ctype.h>
#include "cryptlib.h"
#include <openssl/rand.h>
#include <openssl/x509.h>

/* MIME and related routines */

/* MIME format structures
 * Note that all are translated to lower case apart from
 * parameter values. Quotes are stripped off
 */

typedef struct {
char *param_name;			/* Param name e.g. "micalg" */
char *param_value;			/* Param value e.g. "sha1" */
} MIME_PARAM;

77
DECLARE_STACK_OF(MIME_PARAM)
B
Ben Laurie 已提交
78 79 80 81 82 83 84 85
IMPLEMENT_STACK_OF(MIME_PARAM)

typedef struct {
char *name;				/* Name of line e.g. "content-type" */
char *value;				/* Value of line e.g. "text/plain" */
STACK_OF(MIME_PARAM) *params;		/* Zero or more parameters */
} MIME_HEADER;

86
DECLARE_STACK_OF(MIME_HEADER)
B
Ben Laurie 已提交
87
IMPLEMENT_STACK_OF(MIME_HEADER)
88

89
static int pkcs7_output_data(BIO *bio, BIO *data, PKCS7 *p7, int flags);
90 91 92 93 94 95 96
static int B64_write_PKCS7(BIO *bio, PKCS7 *p7);
static PKCS7 *B64_read_PKCS7(BIO *bio);
static char * strip_ends(char *name);
static char * strip_start(char *name);
static char * strip_end(char *name);
static MIME_HEADER *mime_hdr_new(char *name, char *value);
static int mime_hdr_addparam(MIME_HEADER *mhdr, char *name, char *value);
B
Ben Laurie 已提交
97
static STACK_OF(MIME_HEADER) *mime_parse_hdr(BIO *bio);
98 99 100 101
static int mime_hdr_cmp(const MIME_HEADER * const *a,
			const MIME_HEADER * const *b);
static int mime_param_cmp(const MIME_PARAM * const *a,
			const MIME_PARAM * const *b);
102 103
static void mime_param_free(MIME_PARAM *param);
static int mime_bound_check(char *line, int linelen, char *bound, int blen);
B
Ben Laurie 已提交
104
static int multi_split(BIO *bio, char *bound, STACK_OF(BIO) **ret);
105
static int strip_eol(char *linebuf, int *plen);
B
Ben Laurie 已提交
106
static MIME_HEADER *mime_hdr_find(STACK_OF(MIME_HEADER) *hdrs, char *name);
107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152
static MIME_PARAM *mime_param_find(MIME_HEADER *hdr, char *name);
static void mime_hdr_free(MIME_HEADER *hdr);

#define MAX_SMLEN 1024
#define mime_debug(x) /* x */

/* Base 64 read and write of PKCS#7 structure */

static int B64_write_PKCS7(BIO *bio, PKCS7 *p7)
{
	BIO *b64;
	if(!(b64 = BIO_new(BIO_f_base64()))) {
		PKCS7err(PKCS7_F_B64_WRITE_PKCS7,ERR_R_MALLOC_FAILURE);
		return 0;
	}
	bio = BIO_push(b64, bio);
	i2d_PKCS7_bio(bio, p7);
	BIO_flush(bio);
	bio = BIO_pop(bio);
	BIO_free(b64);
	return 1;
}

static PKCS7 *B64_read_PKCS7(BIO *bio)
{
	BIO *b64;
	PKCS7 *p7;
	if(!(b64 = BIO_new(BIO_f_base64()))) {
		PKCS7err(PKCS7_F_B64_READ_PKCS7,ERR_R_MALLOC_FAILURE);
		return 0;
	}
	bio = BIO_push(b64, bio);
	if(!(p7 = d2i_PKCS7_bio(bio, NULL))) 
		PKCS7err(PKCS7_F_B64_READ_PKCS7,PKCS7_R_DECODE_ERROR);
	BIO_flush(bio);
	bio = BIO_pop(bio);
	BIO_free(b64);
	return p7;
}

/* SMIME sender */

int SMIME_write_PKCS7(BIO *bio, PKCS7 *p7, BIO *data, int flags)
{
	char bound[33], c;
	int i;
153
	char *mime_prefix, *mime_eol, *msg_type=NULL;
154 155 156 157
	if (flags & PKCS7_NOOLDMIMETYPE)
		mime_prefix = "application/pkcs7-";
	else
		mime_prefix = "application/x-pkcs7-";
158

159 160 161 162
	if (flags & PKCS7_CRLFEOL)
		mime_eol = "\r\n";
	else
		mime_eol = "\n";
163 164 165
	if((flags & PKCS7_DETACHED) && data) {
	/* We want multipart/signed */
		/* Generate a random boundary */
166
		RAND_pseudo_bytes((unsigned char *)bound, 32);
167 168 169 170 171 172 173
		for(i = 0; i < 32; i++) {
			c = bound[i] & 0xf;
			if(c < 10) c += '0';
			else c += 'A' - 10;
			bound[i] = c;
		}
		bound[32] = 0;
174
		BIO_printf(bio, "MIME-Version: 1.0%s", mime_eol);
175
		BIO_printf(bio, "Content-Type: multipart/signed;");
176 177 178 179 180
		BIO_printf(bio, " protocol=\"%ssignature\";", mime_prefix);
		BIO_printf(bio, " micalg=sha1; boundary=\"----%s\"%s%s",
						bound, mime_eol, mime_eol);
		BIO_printf(bio, "This is an S/MIME signed message%s%s",
						mime_eol, mime_eol);
181
		/* Now write out the first part */
182
		BIO_printf(bio, "------%s%s", bound, mime_eol);
183
		pkcs7_output_data(bio, data, p7, flags);
184
		BIO_printf(bio, "%s------%s%s", mime_eol, bound, mime_eol);
185 186 187

		/* Headers for signature */

188 189 190 191 192 193 194
		BIO_printf(bio, "Content-Type: %ssignature;", mime_prefix); 
		BIO_printf(bio, " name=\"smime.p7s\"%s", mime_eol);
		BIO_printf(bio, "Content-Transfer-Encoding: base64%s",
								mime_eol);
		BIO_printf(bio, "Content-Disposition: attachment;");
		BIO_printf(bio, " filename=\"smime.p7s\"%s%s",
							mime_eol, mime_eol);
195
		B64_write_PKCS7(bio, p7);
196 197
		BIO_printf(bio,"%s------%s--%s%s", mime_eol, bound,
							mime_eol, mime_eol);
198 199
		return 1;
	}
200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216

	/* Determine smime-type header */

	if (PKCS7_type_is_enveloped(p7))
		msg_type = "enveloped-data";
	else if (PKCS7_type_is_signed(p7))
		{
		/* If we have any signers it is signed-data othewise 
		 * certs-only.
		 */
		STACK_OF(PKCS7_SIGNER_INFO) *sinfos;
		sinfos = PKCS7_get_signer_info(p7);
		if (sk_PKCS7_SIGNER_INFO_num(sinfos) > 0)
			msg_type = "signed-data";
		else
			msg_type = "certs-only";
		}
217
	/* MIME headers */
218 219 220 221
	BIO_printf(bio, "MIME-Version: 1.0%s", mime_eol);
	BIO_printf(bio, "Content-Disposition: attachment;");
	BIO_printf(bio, " filename=\"smime.p7m\"%s", mime_eol);
	BIO_printf(bio, "Content-Type: %smime;", mime_prefix);
222 223
	if (msg_type)
		BIO_printf(bio, " smime-type=%s;", msg_type);
224 225 226
	BIO_printf(bio, " name=\"smime.p7m\"%s", mime_eol);
	BIO_printf(bio, "Content-Transfer-Encoding: base64%s%s",
						mime_eol, mime_eol);
227
	B64_write_PKCS7(bio, p7);
228
	BIO_printf(bio, "%s", mime_eol);
229 230 231
	return 1;
}

232 233 234 235 236 237 238
/* Handle output of PKCS#7 data */


static int pkcs7_output_data(BIO *out, BIO *data, PKCS7 *p7, int flags)
	{
	BIO *tmpbio, *p7bio;

239
	if (!(flags & PKCS7_STREAM))
240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258
		{
		SMIME_crlf_copy(data, out, flags);
		return 1;
		}

	/* Partial sign operation */

	/* Initialize sign operation */
	p7bio = PKCS7_dataInit(p7, out);

	/* Copy data across, computing digests etc */
	SMIME_crlf_copy(data, p7bio, flags);

	/* Must be detached */
	PKCS7_set_detached(p7, 1);

	/* Finalize signatures */
	PKCS7_dataFinal(p7, p7bio);

259
	/* Now remove any digests prepended to the BIO */
260

261
	while (p7bio != out)
262 263
		{
		tmpbio = BIO_pop(p7bio);
264 265
		BIO_free(p7bio);
		p7bio = tmpbio;
266 267 268 269 270 271
		}

	return 1;

	}

272 273 274 275 276 277 278 279
/* SMIME reader: handle multipart/signed and opaque signing.
 * in multipart case the content is placed in a memory BIO
 * pointed to by "bcont". In opaque this is set to NULL
 */

PKCS7 *SMIME_read_PKCS7(BIO *bio, BIO **bcont)
{
	BIO *p7in;
B
Ben Laurie 已提交
280 281
	STACK_OF(MIME_HEADER) *headers = NULL;
	STACK_OF(BIO) *parts = NULL;
282 283 284 285 286 287 288 289 290 291 292 293 294
	MIME_HEADER *hdr;
	MIME_PARAM *prm;
	PKCS7 *p7;
	int ret;

	if(bcont) *bcont = NULL;

	if (!(headers = mime_parse_hdr(bio))) {
		PKCS7err(PKCS7_F_SMIME_READ_PKCS7,PKCS7_R_MIME_PARSE_ERROR);
		return NULL;
	}

	if(!(hdr = mime_hdr_find(headers, "content-type")) || !hdr->value) {
B
Ben Laurie 已提交
295
		sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
296 297 298 299 300 301 302 303 304 305
		PKCS7err(PKCS7_F_SMIME_READ_PKCS7, PKCS7_R_NO_CONTENT_TYPE);
		return NULL;
	}

	/* Handle multipart/signed */

	if(!strcmp(hdr->value, "multipart/signed")) {
		/* Split into two parts */
		prm = mime_param_find(hdr, "boundary");
		if(!prm || !prm->param_value) {
B
Ben Laurie 已提交
306
			sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
307 308 309 310
			PKCS7err(PKCS7_F_SMIME_READ_PKCS7, PKCS7_R_NO_MULTIPART_BOUNDARY);
			return NULL;
		}
		ret = multi_split(bio, prm->param_value, &parts);
B
Ben Laurie 已提交
311 312
		sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
		if(!ret || (sk_BIO_num(parts) != 2) ) {
313
			PKCS7err(PKCS7_F_SMIME_READ_PKCS7, PKCS7_R_NO_MULTIPART_BODY_FAILURE);
B
Ben Laurie 已提交
314
			sk_BIO_pop_free(parts, BIO_vfree);
315 316 317 318
			return NULL;
		}

		/* Parse the signature piece */
B
Ben Laurie 已提交
319
		p7in = sk_BIO_value(parts, 1);
320 321 322

		if (!(headers = mime_parse_hdr(p7in))) {
			PKCS7err(PKCS7_F_SMIME_READ_PKCS7,PKCS7_R_MIME_SIG_PARSE_ERROR);
B
Ben Laurie 已提交
323
			sk_BIO_pop_free(parts, BIO_vfree);
324 325 326 327 328 329 330
			return NULL;
		}

		/* Get content type */

		if(!(hdr = mime_hdr_find(headers, "content-type")) ||
								 !hdr->value) {
B
Ben Laurie 已提交
331
			sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
332 333 334 335 336 337
			PKCS7err(PKCS7_F_SMIME_READ_PKCS7, PKCS7_R_NO_SIG_CONTENT_TYPE);
			return NULL;
		}

		if(strcmp(hdr->value, "application/x-pkcs7-signature") &&
			strcmp(hdr->value, "application/pkcs7-signature")) {
B
Ben Laurie 已提交
338
			sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
339 340
			PKCS7err(PKCS7_F_SMIME_READ_PKCS7,PKCS7_R_SIG_INVALID_MIME_TYPE);
			ERR_add_error_data(2, "type: ", hdr->value);
B
Ben Laurie 已提交
341
			sk_BIO_pop_free(parts, BIO_vfree);
342 343
			return NULL;
		}
B
Ben Laurie 已提交
344
		sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
345 346 347
		/* Read in PKCS#7 */
		if(!(p7 = B64_read_PKCS7(p7in))) {
			PKCS7err(PKCS7_F_SMIME_READ_PKCS7,PKCS7_R_PKCS7_SIG_PARSE_ERROR);
B
Ben Laurie 已提交
348
			sk_BIO_pop_free(parts, BIO_vfree);
349 350 351 352
			return NULL;
		}

		if(bcont) {
B
Ben Laurie 已提交
353
			*bcont = sk_BIO_value(parts, 0);
354
			BIO_free(p7in);
B
Ben Laurie 已提交
355 356
			sk_BIO_free(parts);
		} else sk_BIO_pop_free(parts, BIO_vfree);
357 358 359 360 361 362 363 364 365
		return p7;
	}
		
	/* OK, if not multipart/signed try opaque signature */

	if (strcmp (hdr->value, "application/x-pkcs7-mime") &&
	    strcmp (hdr->value, "application/pkcs7-mime")) {
		PKCS7err(PKCS7_F_SMIME_READ_PKCS7,PKCS7_R_INVALID_MIME_TYPE);
		ERR_add_error_data(2, "type: ", hdr->value);
B
Ben Laurie 已提交
366
		sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
367 368 369
		return NULL;
	}

B
Ben Laurie 已提交
370
	sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390
	
	if(!(p7 = B64_read_PKCS7(bio))) {
		PKCS7err(PKCS7_F_SMIME_READ_PKCS7, PKCS7_R_PKCS7_PARSE_ERROR);
		return NULL;
	}
	return p7;

}

/* Copy text from one BIO to another making the output CRLF at EOL */
int SMIME_crlf_copy(BIO *in, BIO *out, int flags)
{
	char eol;
	int len;
	char linebuf[MAX_SMLEN];
	if(flags & PKCS7_BINARY) {
		while((len = BIO_read(in, linebuf, MAX_SMLEN)) > 0)
						BIO_write(out, linebuf, len);
		return 1;
	}
391 392
	if(flags & PKCS7_TEXT)
		BIO_printf(out, "Content-Type: text/plain\r\n\r\n");
393
	while ((len = BIO_gets(in, linebuf, MAX_SMLEN)) > 0) {
394
		eol = strip_eol(linebuf, &len);
395 396
		if (len)
			BIO_write(out, linebuf, len);
397 398 399 400 401 402 403 404 405 406
		if(eol) BIO_write(out, "\r\n", 2);
	}
	return 1;
}

/* Strip off headers if they are text/plain */
int SMIME_text(BIO *in, BIO *out)
{
	char iobuf[4096];
	int len;
B
Ben Laurie 已提交
407
	STACK_OF(MIME_HEADER) *headers;
408
	MIME_HEADER *hdr;
B
Ben Laurie 已提交
409

410 411 412 413 414 415
	if (!(headers = mime_parse_hdr(in))) {
		PKCS7err(PKCS7_F_SMIME_TEXT,PKCS7_R_MIME_PARSE_ERROR);
		return 0;
	}
	if(!(hdr = mime_hdr_find(headers, "content-type")) || !hdr->value) {
		PKCS7err(PKCS7_F_SMIME_TEXT,PKCS7_R_MIME_NO_CONTENT_TYPE);
B
Ben Laurie 已提交
416
		sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
417 418 419 420 421
		return 0;
	}
	if (strcmp (hdr->value, "text/plain")) {
		PKCS7err(PKCS7_F_SMIME_TEXT,PKCS7_R_INVALID_MIME_TYPE);
		ERR_add_error_data(2, "type: ", hdr->value);
B
Ben Laurie 已提交
422
		sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
423 424
		return 0;
	}
B
Ben Laurie 已提交
425
	sk_MIME_HEADER_pop_free(headers, mime_hdr_free);
426 427 428 429 430 431 432 433 434
	while ((len = BIO_read(in, iobuf, sizeof(iobuf))) > 0)
						BIO_write(out, iobuf, len);
	return 1;
}

/* Split a multipart/XXX message body into component parts: result is
 * canonical parts in a STACK of bios
 */

B
Ben Laurie 已提交
435
static int multi_split(BIO *bio, char *bound, STACK_OF(BIO) **ret)
436 437 438
{
	char linebuf[MAX_SMLEN];
	int len, blen;
439
	int eol = 0, next_eol = 0;
440
	BIO *bpart = NULL;
B
Ben Laurie 已提交
441
	STACK_OF(BIO) *parts;
442
	char state, part, first;
B
Ben Laurie 已提交
443

444 445 446 447
	blen = strlen(bound);
	part = 0;
	state = 0;
	first = 1;
448
	parts = sk_BIO_new_null();
449 450 451 452 453 454 455
	*ret = parts;
	while ((len = BIO_gets(bio, linebuf, MAX_SMLEN)) > 0) {
		state = mime_bound_check(linebuf, len, bound, blen);
		if(state == 1) {
			first = 1;
			part++;
		} else if(state == 2) {
B
Ben Laurie 已提交
456
			sk_BIO_push(parts, bpart);
457 458
			return 1;
		} else if(part) {
459
			/* Strip CR+LF from linebuf */
460
			next_eol = strip_eol(linebuf, &len);
461 462
			if(first) {
				first = 0;
B
Ben Laurie 已提交
463
				if(bpart) sk_BIO_push(parts, bpart);
464
				bpart = BIO_new(BIO_s_mem());
465
				BIO_set_mem_eof_return(bpart, 0);
466 467 468 469 470
			} else if (eol)
				BIO_write(bpart, "\r\n", 2);
			eol = next_eol;
			if (len)
				BIO_write(bpart, linebuf, len);
471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486
		}
	}
	return 0;
}

/* This is the big one: parse MIME header lines up to message body */

#define MIME_INVALID	0
#define MIME_START	1
#define MIME_TYPE	2
#define MIME_NAME	3
#define MIME_VALUE	4
#define MIME_QUOTE	5
#define MIME_COMMENT	6


B
Ben Laurie 已提交
487
static STACK_OF(MIME_HEADER) *mime_parse_hdr(BIO *bio)
488 489 490 491 492
{
	char *p, *q, c;
	char *ntmp;
	char linebuf[MAX_SMLEN];
	MIME_HEADER *mhdr = NULL;
B
Ben Laurie 已提交
493
	STACK_OF(MIME_HEADER) *headers;
494
	int len, state, save_state = 0;
B
Ben Laurie 已提交
495 496

	headers = sk_MIME_HEADER_new(mime_hdr_cmp);
497 498
	while ((len = BIO_gets(bio, linebuf, MAX_SMLEN)) > 0) {
	/* If whitespace at line start then continuation line */
499
	if(mhdr && isspace((unsigned char)linebuf[0])) state = MIME_NAME;
500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523
	else state = MIME_START;
	ntmp = NULL;
	/* Go through all characters */
	for(p = linebuf, q = linebuf; (c = *p) && (c!='\r') && (c!='\n'); p++) {

	/* State machine to handle MIME headers
	 * if this looks horrible that's because it *is*
         */

		switch(state) {
			case MIME_START:
			if(c == ':') {
				state = MIME_TYPE;
				*p = 0;
				ntmp = strip_ends(q);
				q = p + 1;
			}
			break;

			case MIME_TYPE:
			if(c == ';') {
				mime_debug("Found End Value\n");
				*p = 0;
				mhdr = mime_hdr_new(ntmp, strip_ends(q));
B
Ben Laurie 已提交
524
				sk_MIME_HEADER_push(headers, mhdr);
525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575
				ntmp = NULL;
				q = p + 1;
				state = MIME_NAME;
			} else if(c == '(') {
				save_state = state;
				state = MIME_COMMENT;
			}
			break;

			case MIME_COMMENT:
			if(c == ')') {
				state = save_state;
			}
			break;

			case MIME_NAME:
			if(c == '=') {
				state = MIME_VALUE;
				*p = 0;
				ntmp = strip_ends(q);
				q = p + 1;
			}
			break ;

			case MIME_VALUE:
			if(c == ';') {
				state = MIME_NAME;
				*p = 0;
				mime_hdr_addparam(mhdr, ntmp, strip_ends(q));
				ntmp = NULL;
				q = p + 1;
			} else if (c == '"') {
				mime_debug("Found Quote\n");
				state = MIME_QUOTE;
			} else if(c == '(') {
				save_state = state;
				state = MIME_COMMENT;
			}
			break;

			case MIME_QUOTE:
			if(c == '"') {
				mime_debug("Found Match Quote\n");
				state = MIME_VALUE;
			}
			break;
		}
	}

	if(state == MIME_TYPE) {
		mhdr = mime_hdr_new(ntmp, strip_ends(q));
B
Ben Laurie 已提交
576
		sk_MIME_HEADER_push(headers, mhdr);
577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602
	} else if(state == MIME_VALUE)
			 mime_hdr_addparam(mhdr, ntmp, strip_ends(q));
	if(p == linebuf) break;	/* Blank line means end of headers */
}

return headers;

}

static char *strip_ends(char *name)
{
	return strip_end(strip_start(name));
}

/* Strip a parameter of whitespace from start of param */
static char *strip_start(char *name)
{
	char *p, c;
	/* Look for first non white space or quote */
	for(p = name; (c = *p) ;p++) {
		if(c == '"') {
			/* Next char is start of string if non null */
			if(p[1]) return p + 1;
			/* Else null string */
			return NULL;
		}
603
		if(!isspace((unsigned char)c)) return p;
604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620
	}
	return NULL;
}

/* As above but strip from end of string : maybe should handle brackets? */
static char *strip_end(char *name)
{
	char *p, c;
	if(!name) return NULL;
	/* Look for first non white space or quote */
	for(p = name + strlen(name) - 1; p >= name ;p--) {
		c = *p;
		if(c == '"') {
			if(p - 1 == name) return NULL;
			*p = 0;
			return name;
		}
621
		if(isspace((unsigned char)c)) *p = 0;	
622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651
		else return name;
	}
	return NULL;
}

static MIME_HEADER *mime_hdr_new(char *name, char *value)
{
	MIME_HEADER *mhdr;
	char *tmpname, *tmpval, *p;
	int c;
	if(name) {
		if(!(tmpname = BUF_strdup(name))) return NULL;
		for(p = tmpname ; *p; p++) {
			c = *p;
			if(isupper(c)) {
				c = tolower(c);
				*p = c;
			}
		}
	} else tmpname = NULL;
	if(value) {
		if(!(tmpval = BUF_strdup(value))) return NULL;
		for(p = tmpval ; *p; p++) {
			c = *p;
			if(isupper(c)) {
				c = tolower(c);
				*p = c;
			}
		}
	} else tmpval = NULL;
652
	mhdr = (MIME_HEADER *) OPENSSL_malloc(sizeof(MIME_HEADER));
653 654 655
	if(!mhdr) return NULL;
	mhdr->name = tmpname;
	mhdr->value = tmpval;
B
Ben Laurie 已提交
656
	if(!(mhdr->params = sk_MIME_PARAM_new(mime_param_cmp))) return NULL;
657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679
	return mhdr;
}
		
static int mime_hdr_addparam(MIME_HEADER *mhdr, char *name, char *value)
{
	char *tmpname, *tmpval, *p;
	int c;
	MIME_PARAM *mparam;
	if(name) {
		tmpname = BUF_strdup(name);
		if(!tmpname) return 0;
		for(p = tmpname ; *p; p++) {
			c = *p;
			if(isupper(c)) {
				c = tolower(c);
				*p = c;
			}
		}
	} else tmpname = NULL;
	if(value) {
		tmpval = BUF_strdup(value);
		if(!tmpval) return 0;
	} else tmpval = NULL;
U
Ulf Möller 已提交
680
	/* Parameter values are case sensitive so leave as is */
681
	mparam = (MIME_PARAM *) OPENSSL_malloc(sizeof(MIME_PARAM));
682 683 684
	if(!mparam) return 0;
	mparam->param_name = tmpname;
	mparam->param_value = tmpval;
B
Ben Laurie 已提交
685
	sk_MIME_PARAM_push(mhdr->params, mparam);
686 687 688
	return 1;
}

689 690
static int mime_hdr_cmp(const MIME_HEADER * const *a,
			const MIME_HEADER * const *b)
691 692 693 694
{
	return(strcmp((*a)->name, (*b)->name));
}

695 696
static int mime_param_cmp(const MIME_PARAM * const *a,
			const MIME_PARAM * const *b)
697 698 699 700 701 702
{
	return(strcmp((*a)->param_name, (*b)->param_name));
}

/* Find a header with a given name (if possible) */

B
Ben Laurie 已提交
703
static MIME_HEADER *mime_hdr_find(STACK_OF(MIME_HEADER) *hdrs, char *name)
704 705 706 707
{
	MIME_HEADER htmp;
	int idx;
	htmp.name = name;
B
Ben Laurie 已提交
708
	idx = sk_MIME_HEADER_find(hdrs, &htmp);
709
	if(idx < 0) return NULL;
B
Ben Laurie 已提交
710
	return sk_MIME_HEADER_value(hdrs, idx);
711 712 713 714 715 716 717
}

static MIME_PARAM *mime_param_find(MIME_HEADER *hdr, char *name)
{
	MIME_PARAM param;
	int idx;
	param.param_name = name;
B
Ben Laurie 已提交
718
	idx = sk_MIME_PARAM_find(hdr->params, &param);
719
	if(idx < 0) return NULL;
B
Ben Laurie 已提交
720
	return sk_MIME_PARAM_value(hdr->params, idx);
721 722 723 724
}

static void mime_hdr_free(MIME_HEADER *hdr)
{
725 726
	if(hdr->name) OPENSSL_free(hdr->name);
	if(hdr->value) OPENSSL_free(hdr->value);
B
Ben Laurie 已提交
727
	if(hdr->params) sk_MIME_PARAM_pop_free(hdr->params, mime_param_free);
728
	OPENSSL_free(hdr);
729 730 731 732
}

static void mime_param_free(MIME_PARAM *param)
{
733 734 735
	if(param->param_name) OPENSSL_free(param->param_name);
	if(param->param_value) OPENSSL_free(param->param_value);
	OPENSSL_free(param);
736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755
}

/* Check for a multipart boundary. Returns:
 * 0 : no boundary
 * 1 : part boundary
 * 2 : final boundary
 */
static int mime_bound_check(char *line, int linelen, char *bound, int blen)
{
	if(linelen == -1) linelen = strlen(line);
	if(blen == -1) blen = strlen(bound);
	/* Quickly eliminate if line length too short */
	if(blen + 2 > linelen) return 0;
	/* Check for part boundary */
	if(!strncmp(line, "--", 2) && !strncmp(line + 2, bound, blen)) {
		if(!strncmp(line + blen + 2, "--", 2)) return 2;
		else return 1;
	}
	return 0;
}
756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773

static int strip_eol(char *linebuf, int *plen)
	{
	int len = *plen;
	char *p, c;
	int is_eol = 0;
	p = linebuf + len - 1;
	for (p = linebuf + len - 1; len > 0; len--, p--)
		{
		c = *p;
		if (c == '\n')
			is_eol = 1;
		else if (c != '\r')
			break;
		}
	*plen = len;
	return is_eol;
	}